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Box No. VI 


□ 


Box No. VII 
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Box No. VIII 



I. This opinion contains indications relating to the following items: 
Basis of the opinion 
Priority 

Non-establishment of opinion with regard to novelty, inventive step and industrial applicability 
Lack of unity of invention 

Reasoned statement under Rule 43bis.l(a)(i) with regard to novelty, inventive step or industrial applicability; 
citations and explanations supporting such statement 

Certain documents cited 
Certain defects in the international application 



2. FURTHER ACTION 

If a demand for international preliminary examination is made, this opinion will be considered to be a written opinion of the 
International Preliminary Examining Authority ("IPEA") except that this does not apply where the applicant chooses an Authority 
other than this one to be the IPEA and the chosen IPEA has notified the Intemational Bureau under Rule 66. ]bis(b) that written 
opinions of this Intemational Searching Authority will not be so considered. 

If this opinion is, as provided above, considered to be a written opinion of the IPEA, the applicant is invited to submit to the 
IPEA a written reply together, where appropriate, with amendments, before the expiration of 3 months from the date of mailing 
of Form PCT/ISA/220 or before the expiration of 22 months from the priority date, whichever expires later. 
For further options, see Form PCT/ISA/220. 

3, For fiirther details, see notes to Form PCT/ISA/220. 
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Box No. I Basis of this opinion 



1 . With regard to the language, this opinion has been established on the basis of the international application in the language in 
which it was filed, unless otherwise indicated under this item. 

|~| This opinion has been established on the basis of a translation from the original language into the following language 

, which is the language of a translation furnished for the purposes of international search (under 

Rules 12.3 and 23.1(b)). 

2. With regard to any nucleotide and/or amino acid sequence disclosed in the international application and necessary to the 
claimed invention, this opinion has been established on the basis of: 

a. type of material 

I I a sequence listing 

I I table(s) related to the sequence listing 

b. format of material 

I I in wirtten format 

I I in computer readable fonn 

c. time of filing/fbmishing 

contained, in the . intemational application as filed. 
I I filed together with the international application in computer readable form. 
I I furnished subsequently to this.Authority for the purposes of search. 

3. I I In addition, in the case that more than one version or copy of a sequence listing and/or table relating thereto has been 

filed or furnished, the required statements that the information in the subsequent or additioanl copies is identical to that 
in the application as filed or does not go beyond the application as filed, as appropriate, were furnished. 

». 

4. Additional comments: 
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Box No. V Reasoned statement under Rule 43bis.l(a)(i) with regard to novelty, inventive step or industrial applicability; 



citations and explanations supporting such statement 
1. Statement 

Novelty (N) Claims Ij^f YES 

Claims NO 

Inventive step (IS) Claims YES 

Claims NO 

Industrial applicability (lA) Claims 1 - 4 YES 

Claims NO 



2. Citations and explanations : 

Dl : US 6584505 Bl 
D2 : US 6519647 Bl 

The claimed inventions disclose an apparatus for extranet access control, in which a domain web server 
examines the authorization status of each domain using access control list(ACL) information, then the 
encrypted role information cookie generated from the domain web. server is authenticated and authorized at 
the authentication and authorization(AA) . server, finally the information of Role, ACL, access control 
entry(ACE) is saved in the authorization information storage module. 

The citation Dl relates to a method of granting access to a network server which includes granting or denying 
access to the user according to whether the user is authenticated or not. The citation D2 relates to a method 
for synchronizing access control in a web server. 

None of Dl and D2 discloses the generation of the encrypted role information cookie at the domain web 
server and saving the information of Role, ACL, ACE in the authorization information storage module of the 
claimed invention. Moreover, the feature of the AA server including a ACL cache control module for ACL 
cache synchronization is not obvious to a person skilled in the art and is not suggested in the prior art. 
Therefore, the clauned inventions 1-4 are considered to fiilfil the requirement of novelty imder PCT Article 
33(2) and mventive step under PCT Article 33(3). 
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